You are designing a new network for Company X and one of the new cybersecurity policy requirements is that all remote user endpoints must always be connected and protected Which FortiSASE component facilitates this always-on security measure?

1. A. site-based deployment
2. B. thin-branch SASE extension
3. C. unified FortiClient
4. D. inline-CASB

Correct Answer: C
The unified FortiClient component of FortiSASE facilitates the always-on security measure required for ensuring that all remote user endpoints are always connected and protected.
✑ Unified FortiClient:
✑ Always-On Security:
References:
✑ FortiOS 7.2 Administration Guide: Provides information on configuring and managing FortiClient for endpoint security.
✑ FortiSASE 23.2 Documentation: Explains how FortiClient integrates with
FortiSASE to deliver always-on security for remote endpoints.

Refer to the exhibits.





A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?

1. A. The Secure Private Access (SPA) policy needs to allow PING service.
2. B. Quick mode selectors are restricting the subnet.
3. C. The BGP route is not received.
4. D. Network address translation (NAT) is not enabled on the spoke-to-hub policy.

Correct Answer: C

Refer to the exhibits.



A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com-zip file from https://eicar.org. Traffic logs show traffic is allowed by the policy.
Which configuration on FortiSASE is allowing users to perform the download?

1. A. Web filter is allowing the traffic.
2. B. IPS is disabled in the security profile group.
3. C. The HTTPS protocol is not enabled in the antivirus profile.
4. D. Force certificate inspection is enabled in the policy.

Correct Answer: D
https://community.fortinet.com/t5/FortiSASE/Technical-Tip-Force-Certificate- Inspection-option-in-FortiSASE/ta-p/302617

Which two additional components does FortiSASE use for application control to act as an inline-CASB? (Choose two.)

1. A. intrusion prevention system (IPS)
2. B. SSL deep inspection
3. C. DNS filter
4. D. Web filter with inline-CASB

Correct Answer: AB

When you configure FortiSASE Secure Private Access (SPA) with SD-WAN integration, you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub. Which routing protocol must you use?

1. A. BGP
2. B. IS-IS
3. C. OSPF
4. D. EIGRP

Correct Answer: A
When configuring FortiSASE Secure Private Access (SPA) with SD-WAN integration, establishing a routing adjacency between FortiSASE and the FortiGate SD- WAN hub requires the use of the Border Gateway Protocol (BGP).
✑ BGP (Border Gateway Protocol):
✑ Routing Adjacency:
References:
✑ FortiOS 7.2 Administration Guide: Provides information on configuring BGP for SD-WAN integration.
✑ FortiSASE 23.2 Documentation: Details on setting up routing adjacencies using BGP for Secure Private Access with SD-WAN.